Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.cer
File:                     5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.cer (raw, json)
Hash identifier:          IzmyqAQGMYUPNgSahy6skWFnpHNd4Y9+h1SUluQrCuE=
Subject key identifier:   5B:17:40:42:CE:0C:2C:E3:7E:40:D4:A2:AA:AE:AF:5F:95:23:68:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6666BFAA9F535775B5C8F56502E891041CFF8AF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 13:39:41 +0000
Certificate not after:    Fri 08 Nov 2024 13:44:41 +0000
Subordinate resources:    AS: 52715
                          IP: 177.84.20.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:bf:aa:9f:53:57:75:b5:c8:f5:65:02:e8:91:04:1c:ff:8a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 13:39:41 2023 GMT
            Not After : Nov  8 13:44:41 2024 GMT
        Subject: CN=5B174042CE0C2CE37E40D4A2AAAEAF5F95236822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:ad:5b:f3:60:49:7f:b5:e6:4a:aa:c8:b9:
                    7b:e4:a5:29:3f:16:d3:39:27:95:2d:ec:28:a1:48:
                    d5:11:73:ce:15:3f:5d:33:7c:cf:7c:fa:fd:c1:df:
                    46:3f:6d:fd:65:0f:40:f9:f3:1c:6b:38:33:a1:4c:
                    5e:b9:cc:e3:2d:6e:c1:cb:a5:57:35:06:46:af:41:
                    64:38:6d:88:b1:84:7f:c4:ed:df:be:b6:58:e5:37:
                    89:d4:63:a4:04:12:8e:6b:88:e1:cb:a3:86:b2:b9:
                    93:36:7f:f6:9f:f5:a7:4a:1c:88:87:4f:65:f2:17:
                    9a:71:95:46:d9:8b:44:54:f4:c3:48:5f:ab:f1:95:
                    5d:75:21:a4:78:9a:e7:3e:91:11:b2:b7:2b:11:28:
                    09:20:00:44:d9:60:45:8f:2d:a4:ec:b1:6e:eb:4b:
                    fa:35:c2:fb:cf:51:29:1f:3f:20:d5:95:8b:eb:27:
                    86:1f:43:b5:8e:4e:ba:63:a9:6f:77:8d:55:1d:40:
                    f7:cf:3e:6f:9a:ef:71:af:01:74:eb:f0:5d:69:fb:
                    1e:2a:c4:29:56:3b:4f:97:2f:52:d6:63:1c:93:30:
                    d8:c0:3d:c6:81:9f:38:98:00:e3:43:f4:c3:22:54:
                    7e:14:f7:7a:1a:4b:54:cf:95:34:48:ca:75:12:fd:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:17:40:42:CE:0C:2C:E3:7E:40:D4:A2:AA:AE:AF:5F:95:23:68:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/0/5B174042CE0C2CE37E40D4A2AAAEAF5F95236822.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.20.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52715

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:ad:87:18:05:40:a8:26:49:2e:8a:9d:e5:3c:9f:40:13:
         49:dc:fc:02:3c:ce:86:d1:04:22:49:5e:98:7c:05:8a:76:71:
         e6:4a:d4:73:a2:be:fd:ba:d2:1c:56:53:fa:89:81:38:b2:f2:
         88:9d:b2:1f:24:f4:6a:a1:c9:30:cc:17:ea:4c:45:bb:57:76:
         1c:b2:22:bd:63:8d:ef:88:3f:07:3e:0f:ab:5e:de:65:03:8b:
         0c:e7:19:2a:b3:a9:b3:2b:c7:0a:59:d8:08:9e:3a:c3:eb:93:
         e6:c4:b2:ce:27:15:19:1b:16:15:5d:5e:80:48:a1:9b:ea:16:
         ea:37:22:60:85:92:cd:26:9c:96:35:2a:ba:f1:dc:e9:39:dc:
         13:71:56:74:a9:39:41:1c:b9:db:dc:83:03:14:ac:00:89:d0:
         c6:3d:c0:23:9c:cf:ef:be:85:d1:1c:31:a0:a4:f5:b7:e9:31:
         89:ac:2b:85:f7:60:b6:10:27:d0:d6:00:be:7d:be:33:74:50:
         54:45:54:f3:0a:dd:bd:00:64:6a:c4:88:fb:f1:8f:b5:f0:5a:
         0d:cc:36:02:46:1d:aa:19:d0:27:4d:82:2d:b7:46:0d:e2:80:
         d6:06:ef:94:81:e5:23:6a:d0:8e:d1:dd:0b:3f:b2:03:1e:46:
         86:e4:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org